----------------------------------- mapleleafs Wed May 11, 2005 6:56 am Warning, new virus afloat on Msn Messenger ----------------------------------- There is a new virus which may appear in a MSN conversation window stating for example: Mr. Smiley: rofl Mr. Smiley: is this picture you? (followed by a link) If you choose to click on this link, a program will be installed on your computer. One ill-effect of this is sometimes while in MSN Messenger, numerous conversation windows will pop up (with it looking like you're the one sending the 'rofl' message to others). Also, whenever you boot your computer, Windows asks if you want to run a program called "system.exe" (you should probably click no). I've also heard of an instance where this virus caused Windows not to startup (icons did not appear). Um, anyways, I was stupid enough to click the link, and now my computer is somewhat messed up, so if anyone could offer help, that would be great. ----------------------------------- Mazer Wed May 11, 2005 7:19 am ----------------------------------- That's pretty old actually. I thought it went away long ago, but just a few weeks ago my friend was telling me she clicked it. Having not experienced this first hand, I wouldn't know the best way to get rid of it. Except for this: format. I tell ya, it's been my solution to just about every Windows problem (I actually tried, but I couldn't get the virus to run under WINE) that I've had. Although considering how long this has been around, there could be some virus definitions for it. Try updating your antivirus program and doing a full system check. ----------------------------------- jamonathin Wed May 11, 2005 7:43 am ----------------------------------- Yeah I have the exact same problem, only mine says "run.exe", and every once in a while it would say "trofl" or "srofl". Well, maybe thats because I was typing, i dunno. Look at this topic i posted yesterday, betaflye he offered some good help. http://www.compsci.ca/v2/viewtopic.php?t=8757 ----------------------------------- mapleleafs Wed May 11, 2005 7:33 pm ----------------------------------- alright, I downloaded an anti-virus program called "Kapersky" (recommended by betaflye) and my computer is now cleaned. It's rather funny because i just got my computer in december and the virus scan picked up about 12 trojans and over 1000 P2P worms... :cry: ----------------------------------- betaflye Wed May 11, 2005 10:53 pm ----------------------------------- Kapersky consistently is on top of antivirus testing and removal tests (if you don't believe me google it). If you enable to extended definitions you can be even more protected. Glad to see you enjoy it ----------------------------------- Andy Thu May 12, 2005 9:44 am ----------------------------------- trend micro's pc cillin would be my pick.. its really good cuz the instant a new virus comes out, it'll notify you and tell you to update ----------------------------------- Cervantes Thu May 12, 2005 3:03 pm ----------------------------------- Really, I had it for ~six months without getting any updates. The reason it wasn't more than six months was because I had to reformat. ----------------------------------- Andy Thu May 12, 2005 7:53 pm ----------------------------------- maybe u had crappier version, if u want, i can send u the f:idea:u:idea:l:idea:l:idea::idea:v:idea:e:idea:r:idea:s:idea:i:idea:o:idea:n ----------------------------------- Dylan-182 Fri May 13, 2005 10:01 am ----------------------------------- :think: so theres no known way of getting rid of it? my sister clicked the link not knowing what it was and now its asking me 2 run mssgrmessenger.exe at startup its really annoying :wall: ----------------------------------- jamonathin Fri May 13, 2005 1:29 pm ----------------------------------- Anyone have an english version of kapersky? The one i downloaded is all in french, and I can't figure it out. [im guessing everything's backwards on it] ----------------------------------- [Gandalf] Fri May 13, 2005 2:37 pm ----------------------------------- The only way to stop the evil msn messenger to stop starting up is to delete it (highly recommended) or to rename the .exe. ----------------------------------- jamonathin Sat May 14, 2005 7:58 am ----------------------------------- I cant find the .exe though, thats the problem. But are you sayign that the evil msn file is stored in msn messenger itself? so if I were to delete every msn msngr file, i would end up deleting that virus/exe thinger? ----------------------------------- betaflye Sat May 14, 2005 9:44 am ----------------------------------- Anyone have an english version of kapersky? The one i downloaded is all in french, and I can't figure it out. http://www.kaspersky.com/personal Click on trial versions, and find and ensure the download ends in en.exe ----------------------------------- wtd Sat May 14, 2005 11:51 am ----------------------------------- I cant find the .exe though, thats the problem. But are you sayign that the evil msn file is stored in msn messenger itself? so if I were to delete every msn msngr file, i would end up deleting that virus/exe thinger? I think what he's saying is: don'tuse MSN Messenger. If you must converse with those using MSN Messenger, use something Like Trillian on Windows or Gaim on Linux. ----------------------------------- 1of42 Sat May 14, 2005 12:33 pm ----------------------------------- Or better yet, use XFire. ----------------------------------- Mazer Sat May 14, 2005 3:56 pm ----------------------------------- or Gaim on Linux. Or Gaim on Windows. Although I've heard Miranda is a pretty good Windows client (only I've never managed to get connected to MSN with it. ----------------------------------- [Gandalf] Sat May 14, 2005 4:06 pm ----------------------------------- I cant find the .exe though, thats the problem. But are you sayign that the evil msn file is stored in msn messenger itself? so if I were to delete every msn msngr file, i would end up deleting that virus/exe thinger? I think what he's saying is: don'tuse MSN Messenger. If you must converse with those using MSN Messenger, use something Like Trillian on Windows or Gaim on Linux. Precisely, moreover, that is the solution to stopping it from running at startup (if you have WinXP). The virus could be anywhere... You have to get a good antivirus of some kind to find/delete it. Or better yet, use XFire. Well, XFire is good, but not too many people have it, so that would be a problem. Besides, it's messaging capabilities are only average... Also, Coutsos, Miranda is what I use (its really good, and can connect to most messaging networks). Did you try getting the newest msn protocol plugin? ----------------------------------- Bacchus Sat May 14, 2005 4:11 pm ----------------------------------- i use trillina, well i did but now its screwed up and everytime it loads now it crashes lol ----------------------------------- Mazer Sat May 14, 2005 4:25 pm ----------------------------------- Gandalf, it was a long time ago. I'm pretty sure I only downloaded the main program without looking for any plugins, I guess that could be it. ----------------------------------- jamonathin Sun May 15, 2005 8:41 am ----------------------------------- ok sounds good, I'll prolly use trillina. On another note, does anyone know how to set restrictions on XP for websites, using like keywords or something, or is there a program that does this? ----------------------------------- Notoroge Sun May 15, 2005 3:26 pm ----------------------------------- ... And that is why not to use MSNM. Either that or get a good router/Anti-Virus combo going to to stop the nasty stuff from getting in. Also something to think about, isn't there an option, IIRC, in MSNM that allows you to change your ports to non-standard ones? Or perhaps run MSNM through a proxy (A linux proxy perhaps)? I know I have almost %80 of everything I do on the net filtered through a proxy that has WebShield on it. So far, no virus. Ever. For anyting. :) I pride myself in knowing that I've never had to reinstall Windows even once. ----------------------------------- Dylan-182 Fri May 20, 2005 12:14 am ----------------------------------- :o cant remember who it was but who ever told me 2 use kapersky ty :D cause that stupid msn virus has been terminated :guns: hehehe ----------------------------------- Lazarus Sat May 21, 2005 8:51 pm ----------------------------------- I couldn't tell you how to delete it, but I could tell you how to stop the error message on bootup, start>run>msconfig>startup tab>uncheck and suspicious files, don't do this if you don't know what you're doing or if you have a Dell that came with windows pre-installed.